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Abstract — This paper presents an application of robust gain- 
scheduled control concepts using a linear parameter-varying 
(LPV) control synthesis method to design fault tolerant con- 
trollers for a civil transport aircraft. To apply the robust 
LPV control synthesis method, the nonlinear dynamics must 
be represented by an LPV model, which is developed using 
the function substitution method over the entire flight envelope. 
The developed LPV model associated with the aerodynamic co- 
efficient uncertainties represents nonlinear dynamics including 
those outside the equilibrium manifold. Passive and active fault 
tolerant controllers (FTC) are designed for the longitudinal 
dynamics of the Boeing 747-100/200 aircraft in the presence 
of elevator failure. Both FTC laws are evaluated in the full 
nonlinear aircraft simulation in the presence of the elevator 
fault and the results are compared to show “pros” and “cons” 
of each control law. 

I. Introduction 

Aircraft loss-of-control (LOC) accidents [1] comprise the 
largest and most fatal aircraft accident category across all 
civil transport classes, and can result from a large array of 
causal and contributing factors (e.g., system and component 
failures, control system impairment or damage, inclement 
weather, inappropriate pilot inputs, etc.) occurring either 
individually or in combination. Research [2]— [5] into the 
characterization of the aircraft LOC phenomenon as well as 
LOC prevention and recovery system technologies is being 
conducted by NASA as part of its Aviation Safety Program 
(AvSP). Thus, fault tolerant control (FTC) for a transport 
aircraft plays an important role in preventing LOC aircraft 
accidents due to control upset or failure. 

The concept of FTC has been used for various applica- 
tions [6]-[8] including flight control. In general, the FTC 
systems can be categorized into two classes: passive and 
active [9]. A passive FTC law is designed with the consider- 
ation of a set of pre-modeled failures as uncertain dynamics. 
Thus, the gains are not recalculated based on faults but are 
robust enough to maintain closed-loop system stability in 
the presence of faults at the cost of conservative nominal 
performance. Hence, a system with a passive FTC law is not 
vulnerable to a fault detection false alarm, to fault detection 
time delay or to incorrect fault identification. 

An active FTC law recomputes its gains due to faults 
to maintain system performance and stability. It is less 
conservative than a passive FTC law and achieves better 
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performance. Fault detection and isolation (FDI) filters are, 
however, required to implement an active FTC law since 
estimated fault parameters are used to recalculate the gains. 
Fault parameter estimation effects on performance and even 
stability of the integrated system must be considered in a 
validation and verification process [10]. To consider the fault 
parameter estimation effect on the closed-loop system, fault 
detection times (fault estimation time delay) are assumed 
and are simulated with the full nonlinear closed-loop system. 
Based on the simulation results, acceptable fault detection 
time delay is estimated for maintaining closed-loop stability. 

One approach to designing a FTC law is a linear parameter 
varying (LPV) control synthesis method with pre-defined 
fault models using linear matrix inequality (LMI) optimiza- 
tion. Incorporating the benefits of the robust control concept 
developed for an LTI system, the LPV synthesis method has 
been successfully applied to various nonlinear problems: F- 
16 aircraft [11], turbofan engines [12], an inverted pendu- 
lum [13], etc. In Refs. [2], [14], a robust LPV synthesis 
method has been introduced to reduce conservatism induced 
by the structured uncertainty block. In Ref. [2], this method 
was applied to designing a FTC system of the HiMAT aircraft 
described by a linearized model at a trim point. 

Ref. [15] presents a reconfigurable LPV control design 
for a Boeing 747-100/200 aircraft using the conventional 
LPV synthesis method in the presence of an elevator fault 
with unmodeled dynamics. In this paper, the robust LPV 
synthesis method is applied to the design of a FTC law for 
the longitudinal motion of the aircraft that includes the full 
nonlinear dynamics and uncertain aerodynamic coefficients. 
The magnitude of uncertainty of aerodynamic coefficients 
and the moment of inertia term ( I yy ) of the aircraft are 
pre-defined and are considered in the control synthesis pro- 
cedure. Aerodynamic coefficients in tabulated data are fit 
as polynomial functions to generate a LPV model of the 
aircraft. The fitting errors are integrated into the uncertainties 
of aerodynamic coefficients. 

A FTC law has to be robust to the given uncertainty for 
reliability of the implemented control system. In order to 
design a robust LPV-FTC law of the transport aircraft, the 
aerodynamic uncertainties are explicitly considered in the 
control design procedure. In general, a robust control design 
problem cannot be formulated as a linear matrix inequality 
that finds the global solution. The problem is generally 
solved by an iteration method (e.g. D-K iteration [16]). In 
this paper, the robust LPV synthesis method in Ref. [2] is 
used, which is an iteration method for solving two LMI 
optimization problems to reduce the conservatism introduced 
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by the structured uncertainty block. 

To design passive and active FTC laws for the longitudinal 
motion of the aircraft using the robust LPV synthesis method, 
the nonlinear dynamics of the aircraft with uncertain aero- 
dynamic coefficients have to be represented over the given 
flight envelope by a quasi-LPV model. In this paper, the 
function substitution method is used to develop the quasi- 
LPV model of the longitudinal motion of the aircraft. This 
method can convert the nonlinear dynamics into a quasi-LPV 
form over the non-trim region while preserving the stability 
of the original nonlinear system [17]. 

In this paper, both FTC laws are simulated with full 
nonlinear dynamics in the presence of elevator fault and the 
results are compared. Moreover, the closed-loop system with 
the active FTC law is simulated with different fault detection 
time delay intervals. In the example, the time delay makes 
the closed-loop system uncontrollable. This paper highlights 
the issue of a reliable fault detection time delay interval, 
in which the controller can preserve stability. Calculating a 
reliable fault detection time interval is an interesting problem. 
However, it will be considered as a future research topic. 

This paper is organized as follows. Section 2 describes 
the function substitution method and the nonlinear longi- 
tudinal motion of the Boeing 747-100/200 aircraft. Using 
the dynamics substitution method, the nonlinear longitudinal 
dynamics are rewritten as a quasi-LPV model with an uncer- 
tainty block which represents real parameter uncertainties of 
the aerodynamic coefficients. Section 3 defines the control 
objectives for the longitudinal dynamics and the robust 
LPV control synthesis framework. Section 4 presents the 
simulation results for elevator faults with a passive LPV- 
FTC law, an active LPV-FTC law, and a LPV law for healthy 
elevator condition. Conclusions are presented in Section 5. 

II. LPV Model Representation 
A. Function Substitution Method 

The function substitution method, introduced in Ref. [18], 
has been used to develop a quasi-LPV model for nonlinear 
dynamics found in Refs. [11], [17], [19], [20]. The nonlinear 
longitudinal dynamics of a Boeing 747-100/200 aircraft can 
be described by the following nonlinear model: 


where 


h{x i) = A nl (x i) 


X\ r 
X2r 


+ B nl {xi)u r + l n l{x l) 


(3) 


and x = x — x r , u = u — u r . To convert the nonlinear 
dynamics into a quasi-LPV form, the function h(x\) is 
replaced by H(xi)x\ where H[xi) is a mapping function: 
TZ n *i i— > r JZ n x xn *i. A quasi-LPV model is 


~ + B n i(xi)u 

X2 

(4) 

where 0 n^xn^ denotes a zero matrix with the dimension 
of n x by n X2 . The key to the function substitution method 
is to construct the matrix function H{xi). The number of 
possible solutions satisfying the equality condition, h(x i) = 
H(x i)xi, is infinite because the equality constraint is an 
under-determined problem. 

In Ref. [18], the matrix function H(xi) is calculated 
as h(x i)/x\. Therefore, there is singularity at the point: 
x\ = xi r . In Refs. [11], [19], [20], the matrix function 
is calculated by using linear optimization formulated at all 
given grid points with smoothness constraints. The reference 
point is not chosen as a grid point because of the singularity. 
In Ref. [17], the function value at Xi = x- ir is replaced by 
the limit value of lim Xl ^ Xlr h ^ 1 ' ) to remove the singularity. 
In the process of linear optimization in Refs. [11], [17]— 
[20], the aerodynamic coefficients of the nonlinear aircraft 
dynamics are evaluated at all grid points from the tabulated 
data. However, the methods in Refs. [11], [17]-[20] are not 
guaranteed to satisfy the equality condition between grid 
points. In Ref. [17], the preservation of stability of the orig- 
inal nonlinear dynamics was taken into consideration during 
the process of constructing the matrix function H(x i). 

In this paper, the nonlinear function h(x i) is rewritten as a 
polynomial function of x \ with the aerodynamic coefficients 
expressed as polynomials over the given flight envelope. To 
construct the matrix H(xi), the function h(x\) is decom- 
posed into coefficients of x i and each coefficient is collected 
into the matrix form. For example, suppose 


Xi 

X2 


— \ A - nl { x i) + [ H ( x i) I 0 n x xn X2 ]] 


h(x\) = h(x 1 + Xir) 


CL\a + a 2 CxV 2 

b\V + b- 2 aV 


(5) 


where a.j and bj are constant. The h( aq) can be rewritten as 


±i 

X2 


A„i(x i) 


Xl 

X 2 


+ B n i(xi)u + l n l{xi) 


(1) 


with a state vector x T = [x\ x %] £ 7?” x and a 
control vector u £ 7 Z nu . The function A n i(xi), B n i(x 1 ) 
and l n i(x 1 ) are continuous mapping functions: 7?" x i 1 — > 
^ 7^ ,ixXr^ “ and 1l n x i h-» H n * . Note that 
the part (x 2 ) of the state vector and the control vector enter 
the nonlinear dynamics in a linearly affine manner. 

Assume that there is a reference point x x = [ x 
which satisfies a trim condition. A nonlinear model in Eq. (1) 
is rewritten as 


Xi 

= A ni { Xl) 

Xl 

#2. 


X2_ 


+ B n i(xi)u + h(xi) 


( 2 ) 


h(xi) = H(xi)xi = H(x 1 + X\r)xi 


cii + a 2 piV 2 

a 2 ( 1 - pi)aV 

a 

b 2 p 2 V 

bi + 62(1 ~P2)Oi_ 

V 


The values of pi and p 2 are chosen to preserve the stability 
of the original nonlinear model [17]. These underdetermined 
conditions can be solved numerically, as was done in pre- 
vious work [17], Here however, the equations are solved 
symbolically. The benefits of the symbolic solution are:l) 
simplification that avoids the need for a linear optimization 
problem with the smoothness condition, and 2) validation 
of the quasi-LPV model between grid points, including 
computed fitting errors. Moreover, the fitting errors can 
be integrated with the uncertainty block in the quasi-LPV 
model. 
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TABLE I 

The uncertain aerodynamic coefficients 


coefficient 

uncertain range (<5 a ) 

coefficient 

uncertain range(5 a ) 

C D M 

[- 0.01 0 T 01 J 

c Lq 

[-0.15 0.20] 

Cl„ 

[-0.025 0.025] 

Cm„ 

[-0.07 0.03] 

Cm b 

[-0.005 0.005] 

C mq 

[-1, 1] x 10“ 4 

C Lr 

[-6 6] x 10 -6 

Cm a 

[-0.83 0.6] 


B. Longitudinal dynamics of a transport aircraft 

The nonlinear longitudinal dynamics of a transport aircraft 
(Boeing 747-100/200 aircraft) are taken from Refs. [20]— 
[22], The longitudinal motion states and controls are x = 
[cr, q , V. 9} 1 (angle of attack (deg), pitch rate (deg/sec), 
velocity (m/sec), pitch angle (deg)) and u = [<5 e , S s , Tf 
(elevator deflection (deg), horizontal stabilizer deflection 
(deg) and thrust (N)), respectively. The nonlinear longitudinal 
dynamics are documented in Refs. [21], [22], In this paper, 
the flight envelope for the longitudinal dynamics is defined as 
a G [—2 10 ](deg) and V € [100 250] (m/sec) at an altitude 
of 7000 m. Aerodynamic coefficients and their derivatives 
are fit into a polynomial function form such that 

a=[a n a*-” -1 -* ••• 1 }C a [V m V (m -i) ... if + S a 

(7) 

where a is an aerodynamic coefficient, C a is a coefficient 
matrix and S a is a fitting error over the flight envelope. The 
aerodynamic coefficients and their uncertainties are given in 
Table I. The drag coefficient at fixed mach number ( Cu M )> 
the lift coefficient at zero stabilizer angle ( Cl b ), the pitch 
moment coefficient at zero stabilizer angle ( C mb ), the lift 
coefficient derivative due to elevator deflection (Cl c ), and 
the pitching moment coefficient derivative due to elevator 
deflection (C m f) are functions of angle of attack and velocity, 
and the lift coefficient derivative due to pitch rate (Cl ), 
the pitching moment coefficient derivative due to stabilizer 
deflection (C ms ), and the pitching moment coefficient deriva- 
tive due to pitch rate (C mq ) are constant over the flight enve- 
lope. The detailed polynomial fit functions are omitted due 
to limited space. Note that the aerodynamic coefficients are 
evaluated in the full nonlinear simulation with the tabulated 
data. The polynomial fit aerodynamic coefficients are only 
used for the quasi-LPV model development. 


C. LPV model with real parameter uncertainties 

Using the symbolic tool in MATLAB and the function 
substitution method, the nonlinear longitudinal model can 
be rewritten as 


X 


>> 

s 

05 

A 

jf 

cq 

A 


X 

Zp 

= 

Cfa,V) D zw (a, V) D zu {a,V ) 


Wp 

_y . 


_C v (a, V) D yw (a, V) D yu (a,V)_ 


u 


( 8 ) 

Wp = A p z p , (9) 

where A p represents real parameter uncertainties of the aero- 
dynamic coefficients. With the assumption that the moment 


of inertia (I yy ) uncertainty is 5 percent of nominal value 
(45278000 Kg to 2 ), the A p is 


A p 


diag{[Sc DM , Sc Lb , S Cmb , Sc Lq , 
s c Lq , $c ms , S Cmq , S Cme ,S Iyy )] 


(10) 


Note that the 9 real uncertainty parameters are normalized 
such that A p < 1. 

For comparison between the linearized model and the 
quasi-LPV model, an extreme flight maneuver (shown in 
Fig. 1) is simulated for the elevator and thrust input sig- 
nals to show which model can best capture the origi- 
nal nonlinear model. Time responses for each model are 
shown in Fig. 1. Note that the linearized model (LTI) is 
obtained using Jacobian linearization around a trim point 
(x t « [ 1.1 (deg), 0 , 228 (to/s), 1.1 (deg)], u t « 

[—2 (deg), 1.3 (deg), 43000(A)]) at altitude of 7000 m. It is 
observed from Fig. 1 that the quasi-LPV model can capture 
the nonlinear aspects of the original model better than the 
linearized model. 
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Fig. 1. The simulation results of the nonlinear model (Non-L), the quasi- 
LPV model (Q-LPV), and the linearized model (LTI) 


III. Robust LPV FTC Control Synthesis 
A. Control Objectives 

The control objectives for the transport aircraft are to 
obtain good tracking on flight path angle ( 7 ) and velocity 
commands in the presence of parameter uncertainties and 
an elevator fault. The elevator fault is modeled as zero 
controllability in the elevator channel. The elevator and 
stabilizer actuator dynamics are modeled as 

Se = pf JT Y? Se - d ’ Ss = {1 ~ pf) J+ox Ss - d (11) 

with the fault parameter ( py ) which can vary from 0 (failure 
case) to 1 (healthy case). Here S ecrrid and S Scmd are actuator 
command signals from a control law. The engine is modeled 
as the first order transfer function The deflection and 

rate limits for the elevator and the stabilizer are —23 < 
S e < 17, [ 6 e | < 37 (deg/sec) and —12 < S s < 3, 6 s < 
0.5 {deg/sec) (Refs. [15], [20], [22]). The maximum thrust 
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and thrust rate are 167000N and 83500 N/s, respectively. 
Actuator models and their limits are included in the nonlinear 
simulations. To formulate the control objectives into an 



relating the input and output signals belongs to a set S A - 

S A = {S : 5 > 0, SA = AS, S € R“ 4X " 4 }. ( 12 ) 

In Fig. 3, the scheduling parameter p represents angle of 
attack a, velocity V , and the fault parameter pf. 


B. Linear Matrix Inequality Optimization Formulation 

The robust LPV control synthesis problem is stated as 
designing an LPV controller with the scaling matrix S to 
minimize the induced C 2 norm of the closed-loop system. 


min 7 = 

K,S 


IlK e T ] T h 

UK || 2 ‘ 


(13) 


Fig. 2. The interconnection structure with a controller and weighting 
functions. 


optimization problem of minimizing the induced-/^ norm 
of the closed-loop system from commands to tracking errors, 
the model matching framework shown in Fig. 2 is used in this 
paper. The desired velocity tracking model (T v ) is chosen 
as the second order system J , 2 +0 ° 3 s% is 2 f rom Ref- [15] 
with 0.15 rad/sec as the cut off frequency. The desired 
flight path tracking model (T7) is chosen as the second 
order system ( s 2 + i 4I+0 7 2 ) having a cut-off frequency of 
0.7 rad/sec. The desired transfer functions are defined based 


on control designer judgment. The performance weighting 
function W p is chosen as diag([^^±D, ^oos+i^ D 
to penalize the tracking error at low frequency range (de- 
sired tracking within 2 % of command) and to be relaxed 


at high frequency since unmodeled actuator dynamic un- 
certainty is greater than 100% at high frequency. The 


unmodeled dynamics W um [15] 

HiWfMHf/Lhii 0.01(5/0.5+1) 

um SU s/500+1 ’ s/300+1 ’ 


of actuators are set as 
°'°/500+i 1) ]) t0 represent 


1% uncertainty at low frequency. The noise level W nmse 


is set as diag([0.05deg, O.ldeg/sec, 0.05m/sec]). The 



Fig. 3. The augmented open-loop with the scaling factor associated with 
the uncertainty block A. 


augmented open-loop system is represented by the dashed- 
dotted box shown in Fig. 3. The augmented state vector x 
includes longitudinal dynamics states, actuator states, and 
weighting function states; the vectors 2 and w are associated 
with the uncertainty block A, diag([A p , A. um ]), the vector 
e represents weighted tracking errors, and the vector d repre- 
sents noise inputs, flight path angle and velocity commands. 
Note that the command signals are treated as disturbance 
signals here. The scaling matrix S over the uncertainty block 


This problem is a bilinear matrix inequality problem similar 
to a D-K iteration problem for a linear system. In this paper, 
this problem is solved by an iterative procedure using the 
linear matrix inequality (LMI) optimization. The iteration 
procedure is as follows: 

1) Design an LPV controller K using a conventional LPV 
synthesis method [23], [24], with an assumption that S = 
/, to minimize the induced-/^ norm index 7 over all LMI 
constraints evaluated at all grid points. The grid points are set 
as V = [110 140 170 200 230] and p f = [0.01 0.3 0.6 1], 

2) Combine the designed controller K and the augmented 
open-loop system with all weighting functions, resulting in 
the augmented closed-loop system given by 



A c i 

C cl 


Bi cl 

K 




- X c l 

w 

- 1 d 


(14) 


where the vector p is [z T e T ] . 

3) Calculate a scaling matrix S solving the following LMI 
optimization problem. Applying the Kalman- Yakubovich- 
Popov lemma (Ref. [25]), the following LMI optimization 
is formulated to minimize the induced-/^ norm of the 
augmented closed-loop system from d to e. 


min 7 C (15) 

p, S ' 

subject to 

'Mn 

(*) 

Lw 

where 


and Mu = % + PA c i + P + Cj/SC'd. The notation 
(*) denotes the symmetric component of the LMI constraint. 
Note that the LMI constraint in Eq. (16) can be derived from 
the candidate quadratic Lyapunov function V = x T Px and 

1 1 e 1 1 2 < Yc| Ml I2- 

4) The calculated scaling matrix S is integrated with the 
augmented open-loop in Fig. 3. A new LPV controller K 
is calculated based on the new augmented open-loop shown 
in dashed-dotted line in Fig. 3 to minimize an induced-/^ 


PB lel +C%SD le 

DfjD u -S 

(*) 


PB 2cl + C%SDi o 

DljD 2 ci 

DLSD 2el -I 


< 0 


(16) 


S = 


S 

0 7 c In 


0 


(17) 
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norm of the closed-loop system using the conventional LPV 
synthesis method. 

5) Iterate steps 1-4 until optimal solution 7 value is 
converged or the designed controller provides satisfactory 
performance. 

This iterative procedure does not guarantee convergence. 
Also note that this procedure may not find global solutions 
for K and S. Using the iteration procedure, three LPV con- 
trollers are designed. 1) A nominal, no actuator failure, LPV 
controller (Kppy h ), robust to the real parameter uncertainty, 
is designed to minimize the performance index (induced-^ 
norm). It is used as a baseline for comparison in case of 
an actuator failure. 2) A passive LPV FTC law (Kppy ) is 
constructed in the presence of the elevator fault. 3) An active 
LPV FTC law ( Kppy a ) is designed in the presence of the 
elevator fault with the assumption that the fault is accurately 
estimated on-line. For the healthy condition, elevator and 
thrust are used to control the longitudinal motion of the 
aircraft, while the stabilizer is used only as a trimming 
device. 

To design a passive LPV-FTC law, elevator failure should 
be modeled into an LFT form. The failure parameter pf is 
modeled as the upper LFT form !F u (M,S Pf ), where M = 

with S Pf | < 1. We put the matrix M in the 

signal path between the open-loop model and the elevator 
actuator in Fig. 2 to represent elevator failure as a parameter 
uncertainty. In the control design process for Kppy , the 
real parameter uncertainty 6 Pf is appended to the uncertainty 
block shown in Fig. 3 such that A = diag([A pi A um ,6 Pf ]). 
Note that the elevator failure is treated as a real parameter 
uncertainty in designing a passive FTC law. 

In an active LPV-FTC law design, the elevator is used 
under the healthy condition and the stabilizer is used only 
in the presence of the elevator failure. The actuators are 
modeled as in Eq.(ll) with fault parameter pp. In this case, 
pj is one of the scheduling parameters. For all three LPV 
controllers, the minimized induced £ 2 norm index 7 is 
around 2.5. In this example during the iteration process, the 
7 values do not change much. After 3 iterations, the iteration 
procedure is terminated. 

IV. Simulation Results 

The designed LPV control laws are evaluated in the 
nonlinear dynamic simulation with commanded flight path 
angle under nominal and faulty conditions. For the faulty 
condition, the elevator is stuck at 10 sec. For all simulations, 
the flight path angle command is a 3 degree magnitude, 70 
second duration pulse beginning at 5 sec. It is observed from 
the simulation results shown in Fig. 4 that all controllers 
achieve the desired performance under the healthy condition. 
Note that the passive FTC law ( Klpv ) uses both the 
elevator and the stabilizer even in the nominal case. The 
active FTC law, however, uses only the elevator under the 
healthy condition. 

It is observed from Fig. 5 that the FTC controllers Kppy p 
and I\LPV a achieve the desired performance in the presence 
of the elevator fault. Note that the closed-loop time responses 


0 VOA 
v/(L5 0.5 


for the controller Kppy h show that the system is unstable 
in the presence of the elevator fault. The design of the 
active FTC law Kppy a assumed that the fault parameter is 
accurately estimated with no time delay. Based on the fault 
parameter, the gains in the active FTC law are reconfigured 
to use the stabilizer instead of the faulty elevator. 



Fig. 4. The simulation results with the control laws under a healthy 
condition. 



Fig. 5. The simulation results under the faulty condition: the stuck elevator 
at 10 sec. 


Although not explicitly considered in the design process, 
the effect of time delays in the fault detection algorithm can 
be examined in the nonlinear simulation. The fault detection 
time is defined as the time interval to detect a fault after fault 
occurrence. In this example, the fault detection times are 
assumed to be 1 sec, 5 sec, 10 sec and 20 sec, respectively. 
For example, 5 sec fault detection time means that when the 
elevator is stuck at 10 sec, the fault parameter is estimated 
at 15 sec. It is observed from Fig. 6 that the system remains 
stable for 1 sec and 5 sec fault detection time cases. For the 
10 sec and 20 sec detection time cases, the system is unstable 
since the disturbance caused by the stuck elevator makes 
the system unrecoverable. It is observed from the stabilizer 
time responses that the stabilizer deflection rate is already 
saturated when the fault is detected and the controller gains 
recalculated. It is too late to stabilize the system using the 
stabilizer with its rate limit of 0.5 deg/sec. For this single 
actuator failure case, non-zero controllability condition for 
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Fig. 6. The simulation results with fault detection time: 1 sec, 5 sec, 10 
sec and 20 sec 


the active FTC law is not satisfied for the short time interval. 
Thus to reiterate, calculating a reliable fault detection time 
limit for stability and performance is still an open problem 
due to nonlinearity and complexity of the integrated system 
as well as the fault condition itself with the limited control 
authorities. Calculating a reliable fault detection time limit 
will be a future research topic. 

V. Conclusion 

Robust-gain scheduled control concepts have been applied 
to design passive and active fault tolerant control laws for a 
transport aircraft. In order to use the LPV synthesis method, 
the nonlinear model of the longitudinal aircraft dynamics is 
converted into a quasi-LPV form. In the LPV representation 
procedure, the tabulated aerodynamic coefficients are fit as 
polynomial functions of angle of attack and velocity. The 
fitting errors are integrated into the real parameter model 
uncertainties. The passive and active FTC laws, designed 
based on the quasi-LPV model, achieve the desired perfor- 
mance level in the presence of the prescribed elevator fault. 
In this example, the “pros” and “cons” of each FTC law 
are compared via nonlinear simulations. For the active FTC 
controlled system for the elevator failure, the controllability 
condition is not satisfied for the fault detection time delay 
(f > 10 sec). It makes the system unstable due to the limited 
control authority. For the passive FTC law, the controller uses 
both the elevator and the stabilizer for control even healthy 
condition. 
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